Principle Engineer - Security at Wasoko

This role has the potential to lead our entire IT team over time as a qualified leader. We view IT as a function of a secure, monitored, automated self-operating system with a low-cost footprint. The aspiring engineer will set up Wasok as one of the leading commerce businesses with a strong security posture within Africa.

What you will do in this role:

• Audit GCP-hosted distributed services and customer data to identify vulnerabilities and gaps
• Evaluate the security posture of our corporate IT systems, networks and data
• Architect Wasok cyber security guiding principles and best practices
• Engineer and build automation, tools that scale to then continuously protect our systems
• Set up governance standards, and best practices working with developers and SREs
• Own and drive response to any security incidents at tier-1
• Set up security standards and roadmap for payment-related services
• Become a voice of security, develop mechanisms to establish a culture of security across Wasoko
• Partner with a product to instil customer first approach in everything security

Requirements:

• Hands-on operating at excellence experience as a head security engineer for high traffic production system
• Deep knowledge of cloud security architecture and toolset (GCP preferred)
• Expert with developer security standards and ways to address them (OWASP top 10 e.g.)
• Experience with compliance standards (e.g. PCI DSS) CISSP or other security certification
• Applied knowledge of security testing a plus SAST, DAST, and SCA
• Expert in python, ruby to golang
• Excellent communication, collaboration and influencing skills ` clarity of thought, articulation, data drives and fact-based

Nice to have:

• Payment and mobile security exp in scaling e-commerce environment
• Exp building security function from the ground up in a startup that scale